Legal Protection for E-Commerce Consumers Against Personal Data Leaks

Abstract

Legal protection for e-commerce consumers in the event of personal data leaks is crucial, as this data not only relates to individual privacy rights but also impacts aspects of state sovereignty. This study aims to analyze such legal protection, focusing on the implementation of Law Number 27 of 2022 concerning Personal Data Protection. The research addresses two main issues: first, the legal responsibilities of e-commerce businesses concerning personal data leaks, exemplified by the Tokopedia case in 2020; and second, the legal challenges associated with cross-border data transfers, which serve as the basis for a judicial review request to the Constitutional Court. The study employs a normative juridical method to examine the alignment of national legal norms with digital data management practices and the developments in international law. The findings indicate that while Law Number 27 of 2022 has strengthened the national legal framework, there are still gaps in supervision, law enforcement, and mechanisms for transferring data to foreign entities. This research aims to provide recommendations for the government, regulatory agencies, and businesses to enhance Indonesia's digital sovereignty and ensure the protection of consumer privacy rights.